Best practice of taking a backup of current LDAP and restore that into a new server

[Fosiul Alam]

Hi
I have a running Fedora 389 Server

I want to create a test server but i want to have the same data from
My production server

So i am thinking
if i take a backup of production server

then create a a new 389 instances then restore from that backup in to
new 389 instance
will it work ??

Thanks for your help.

Fosiul

[Grzegorz Dwornicki]

Hi

I'm not sure about your second server, does it need to have same base tree.
I think yes it needs. Because admin console and shell 389 backup tools make
copy of database files not in ldif format. If your second server have
diferent tree you can use sed + ldapsearch to extract data.

Consider also this: The best way to sync two or more ldap servers is
replication.

Greg.

wiadomosc wyslana z htc desire z
08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> Hi
> I have a running Fedora 389 Server
>
> I want to create a test server but i want to have the same data from
> My production server
>
> So i am thinking
> if i take a backup of production server
>
> then create a a new 389 instances then restore from that backup in to
> new 389 instance
> will it work ??
>
> Thanks for your help.
> Fosiul
>
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Fosiul Alam]

Hi
Is there any way to make ldif from production server
then  run this on this test server??

Fosiul

On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki  wrote:
> Hi
>
> I'm not sure about your second server, does it need to have same base tree.
> I think yes it needs. Because admin console and shell 389 backup tools make
> copy of database files not in ldif format. If your second server have
> diferent tree you can use sed + ldapsearch to extract data.
>
> Consider also this: The best way to sync two or more ldap servers is
> replication.
>
> Greg.
>
> wiadomosc wyslana z htc desire z
>
> 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > Hi
> > I have a running Fedora 389 Server
> >
> > I want to create a test server but i want to have the same data from
> > My production server
> >
> > So i am thinking
> > if i take a backup of production server
> >
> > then create a a new 389 instances then restore from that backup in to
> > new 389 instance
> > will it work ??
> >
> > Thanks for your help.
> > Fosiul
> >
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Grzegorz Dwornicki]

Yes i told you how in ealier mail.

Just run ldapseach as dirctory manger with criteria/filters/basedn you
want. Next pipe or copy results to file. Maybe use sed on the file to make
litle changes of needed. Copy it to second server and use ldapadd on it.

Greg.

Send from z htc desire z
08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> Hi
> Is there any way to make ldif from production server
> then  run this on this test server??
>
> Fosiul
>
> On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki 
> wrote:
> > Hi
> >
> > I'm not sure about your second server, does it need to have same base
>
> tree.
> > I think yes it needs. Because admin console and shell 389 backup tools
>
> make
> > copy of database files not in ldif format. If your second server have
> > diferent tree you can use sed + ldapsearch to extract data.
> >
> > Consider also this: The best way to sync two or more ldap servers is
> > replication.
> >
> > Greg.
> >
> > wiadomosc wyslana z htc desire z
> >
> > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > Hi
> > > I have a running Fedora 389 Server
> > >
> > > I want to create a test server but i want to have the same data from
> > > My production server
> > >
> > > So i am thinking
> > > if i take a backup of production server
> > >
> > > then create a a new 389 instances then restore from that backup in to
> > > new 389 instance
> > > will it work ??
> > >
> > > Thanks for your help.
> > > Fosiul
> > >
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> Regards
> Fosiul Alam
> 07877100621
> http://www.fosiul.co.uk
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Fosiul Alam]

Hi thanks

my ldap is like this

l=uk,dc=fosiul,dc=lan

then it has OU=Users
OU=Grups

what shall be the command  for bellow ?
(Just run ldapseach as dirctory manger with criteria/filters/basedn you want. )

On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki  wrote:
> Yes i told you how in ealier mail.
>
> Just run ldapseach as dirctory manger with criteria/filters/basedn you want.
> Next pipe or copy results to file. Maybe use sed on the file to make litle
> changes of needed. Copy it to second server and use ldapadd on it.
>
> Greg.
>
> Send from z htc desire z
>
> 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > Hi
> > Is there any way to make ldif from production server
> > then  run this on this test server??
> >
> > Fosiul
> >
> > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki 
> > wrote:
> > > Hi
> > >
> > > I'm not sure about your second server, does it need to have same base
> > > tree.
> > > I think yes it needs. Because admin console and shell 389 backup tools
> > > make
> > > copy of database files not in ldif format. If your second server have
> > > diferent tree you can use sed + ldapsearch to extract data.
> > >
> > > Consider also this: The best way to sync two or more ldap servers is
> > > replication.
> > >
> > > Greg.
> > >
> > > wiadomosc wyslana z htc desire z
> > >
> > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > Hi
> > > > I have a running Fedora 389 Server
> > > >
> > > > I want to create a test server but i want to have the same data from
> > > > My production server
> > > >
> > > > So i am thinking
> > > > if i take a backup of production server
> > > >
> > > > then create a a new 389 instances then restore from that backup in to
> > > > new 389 instance
> > > > will it work ??
> > > >
> > > > Thanks for your help.
> > > > Fosiul
> > > >
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > Regards
> > Fosiul Alam
> > 07877100621
> > http://www.fosiul.co.uk
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Grzegorz Dwornicki]

You can run this in many ways for example:

Ldapsearch -D "cn=Directory Manager" -W -b ou=Users,l=uk,dc=fosiul,dc=lan
Ldapsearch -D "cn=Directory Manager" -W -b ou=Groups,l=uk,dc=fosiul,dc=lan

This way you get 2 results in ldif format. But you can try something like
this:

Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
'(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'

I used "I" in ldapfilter because could not find pipe character on my phone
please use pipe character known from bash instead. Sorry for trouble.

This command should give the same result as ones provided ealier, but in
one query. I am asking for all ldap content and filter it aginst persons,
posixgroups and users/groups containers.

What i ment is you can do this task in many ways :)

Greg.

Send from z htc desire z
08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> Hi thanks
>
> my ldap is like this
>
> l=uk,dc=fosiul,dc=lan
>
> then it has OU=Users
> OU=Grups
>
> what shall be the command  for bellow ?
> (Just run ldapseach as dirctory manger with criteria/filters/basedn you
> want. )
>
> On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki 
> wrote:
> > Yes i told you how in ealier mail.
> >
> > Just run ldapseach as dirctory manger with criteria/filters/basedn you
>
> want.
> > Next pipe or copy results to file. Maybe use sed on the file to make
>
> litle
> > changes of needed. Copy it to second server and use ldapadd on it.
> >
> > Greg.
> >
> > Send from z htc desire z
> >
> > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > Hi
> > > Is there any way to make ldif from production server
> > > then  run this on this test server??
> > >
> > > Fosiul
> > >
> > > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki 
> > > wrote:
> > > > Hi
> > > >
> > > > I'm not sure about your second server, does it need to have same base
> > > > tree.
> > > > I think yes it needs. Because admin console and shell 389 backup tools
> > > > make
> > > > copy of database files not in ldif format. If your second server have
> > > > diferent tree you can use sed + ldapsearch to extract data.
> > > >
> > > > Consider also this: The best way to sync two or more ldap servers is
> > > > replication.
> > > >
> > > > Greg.
> > > >
> > > > wiadomosc wyslana z htc desire z
> > > >
> > > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > Hi
> > > > > I have a running Fedora 389 Server
> > > > >
> > > > > I want to create a test server but i want to have the same data from
> > > > > My production server
> > > > >
> > > > > So i am thinking
> > > > > if i take a backup of production server
> > > > >
> > > > > then create a a new 389 instances then restore from that backup in to
> > > > > new 389 instance
> > > > > will it work ??
> > > > >
> > > > > Thanks for your help.
> > > > > Fosiul
> > > > >
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > Regards
> > > Fosiul Alam
> > > 07877100621
> > > http://www.fosiul.co.uk
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> Regards
> Fosiul Alam
> 07877100621
> http://www.fosiul.co.uk
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Michael R. Gettes]

to get a backup of just the data - the simplest thing to do is to use db2ldif (documented well in the various versions).  you can use the GUI to do an export which uses db2ldif under the covers.  db2ldif has various capabilities to include and exclude portions of the tree.  ldif2db is to import.  also well documented.  i do this all the time.  it's really easy.

/mrg

On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
> You can run this in many ways for example:
>
> Ldapsearch -D "cn=Directory Manager" -W -b ou=Users,l=uk,dc=fosiul,dc=lan
> Ldapsearch -D "cn=Directory Manager" -W -b ou=Groups,l=uk,dc=fosiul,dc=lan
>
> This way you get 2 results in ldif format. But you can try something like this:
>
> Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
>
> I used "I" in ldapfilter because could not find pipe character on my phone please use pipe character known from bash instead. Sorry for trouble.
>
> This command should give the same result as ones provided ealier, but in one query. I am asking for all ldap content and filter it aginst persons, posixgroups and users/groups containers.
>
> What i ment is you can do this task in many ways :)
>
> Greg.
>
> Send from z htc desire z
>
> 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> Hi thanks
>
> my ldap is like this
>
> l=uk,dc=fosiul,dc=lan
>
> then it has OU=Users
> OU=Grups
>
> what shall be the command  for bellow ?
> (Just run ldapseach as dirctory manger with criteria/filters/basedn you want. )
>
> On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki  wrote:
> > Yes i told you how in ealier mail.
> >
> > Just run ldapseach as dirctory manger with criteria/filters/basedn you want.
> > Next pipe or copy results to file. Maybe use sed on the file to make litle
> > changes of needed. Copy it to second server and use ldapadd on it.
> >
> > Greg.
> >
> > Send from z htc desire z
> >
> > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > Hi
> > > Is there any way to make ldif from production server
> > > then  run this on this test server??
> > >
> > > Fosiul
> > >
> > > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki 
> > > wrote:
> > > > Hi
> > > >
> > > > I'm not sure about your second server, does it need to have same base
> > > > tree.
> > > > I think yes it needs. Because admin console and shell 389 backup tools
> > > > make
> > > > copy of database files not in ldif format. If your second server have
> > > > diferent tree you can use sed + ldapsearch to extract data.
> > > >
> > > > Consider also this: The best way to sync two or more ldap servers is
> > > > replication.
> > > >
> > > > Greg.
> > > >
> > > > wiadomosc wyslana z htc desire z
> > > >
> > > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > Hi
> > > > > I have a running Fedora 389 Server
> > > > >
> > > > > I want to create a test server but i want to have the same data from
> > > > > My production server
> > > > >
> > > > > So i am thinking
> > > > > if i take a backup of production server
> > > > >
> > > > > then create a a new 389 instances then restore from that backup in to
> > > > > new 389 instance
> > > > > will it work ??
> > > > >
> > > > > Thanks for your help.
> > > > > Fosiul
> > > > >
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > Regards
> > > Fosiul Alam
> > > 07877100621
> > > http://www.fosiul.co.uk
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> Regards
> Fosiul Alam
> 07877100621
> http://www.fosiul.co.uk
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Fosiul Alam]

Hi thanks

Just  a quick qustion
is there any ldapcommand which will give me a list of groups a user belong to ??

Supppose I want to see all the groups list a user call jonh smith belong to ??
thanks

On Wed, Aug 8, 2012 at 2:05 PM, Michael R. Gettes  wrote:
> to get a backup of just the data - the simplest thing to do is to use
> db2ldif (documented well in the various versions).  you can use the GUI to
> do an export which uses db2ldif under the covers.  db2ldif has various
> capabilities to include and exclude portions of the tree.  ldif2db is to
> import.  also well documented.  i do this all the time.  it's really easy.
>
> /mrg
>
> On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
>
> You can run this in many ways for example:
>
> Ldapsearch -D "cn=Directory Manager" -W -b ou=Users,l=uk,dc=fosiul,dc=lan
> Ldapsearch -D "cn=Directory Manager" -W -b ou=Groups,l=uk,dc=fosiul,dc=lan
>
> This way you get 2 results in ldif format. But you can try something like
> this:
>
> Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
> '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
>
> I used "I" in ldapfilter because could not find pipe character on my phone
> please use pipe character known from bash instead. Sorry for trouble.
>
> This command should give the same result as ones provided ealier, but in one
> query. I am asking for all ldap content and filter it aginst persons,
> posixgroups and users/groups containers.
>
> What i ment is you can do this task in many ways :)
>
> Greg.
>
> Send from z htc desire z
>
> 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> > Hi thanks
> >
> > my ldap is like this
> >
> > l=uk,dc=fosiul,dc=lan
> >
> > then it has OU=Users
> > OU=Grups
> >
> > what shall be the command  for bellow ?
> > (Just run ldapseach as dirctory manger with criteria/filters/basedn you
> > want. )
> >
> > On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki 
> > wrote:
> > > Yes i told you how in ealier mail.
> > >
> > > Just run ldapseach as dirctory manger with criteria/filters/basedn you
> > > want.
> > > Next pipe or copy results to file. Maybe use sed on the file to make
> > > litle
> > > changes of needed. Copy it to second server and use ldapadd on it.
> > >
> > > Greg.
> > >
> > > Send from z htc desire z
> > >
> > > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > > Hi
> > > > Is there any way to make ldif from production server
> > > > then  run this on this test server??
> > > >
> > > > Fosiul
> > > >
> > > > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki 
> > > > wrote:
> > > > > Hi
> > > > >
> > > > > I'm not sure about your second server, does it need to have same base
> > > > > tree.
> > > > > I think yes it needs. Because admin console and shell 389 backup
> > > > > tools
> > > > > make
> > > > > copy of database files not in ldif format. If your second server have
> > > > > diferent tree you can use sed + ldapsearch to extract data.
> > > > >
> > > > > Consider also this: The best way to sync two or more ldap servers is
> > > > > replication.
> > > > >
> > > > > Greg.
> > > > >
> > > > > wiadomosc wyslana z htc desire z
> > > > >
> > > > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > > Hi
> > > > > > I have a running Fedora 389 Server
> > > > > >
> > > > > > I want to create a test server but i want to have the same data from
> > > > > > My production server
> > > > > >
> > > > > > So i am thinking
> > > > > > if i take a backup of production server
> > > > > >
> > > > > > then create a a new 389 instances then restore from that backup in
> > > > > > to
> > > > > > new 389 instance
> > > > > > will it work ??
> > > > > >
> > > > > > Thanks for your help.
> > > > > > Fosiul
> > > > > >
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > Regards
> > > > Fosiul Alam
> > > > 07877100621
> > > > http://www.fosiul.co.uk
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > Regards
> > Fosiul Alam
> > 07877100621
> > http://www.fosiul.co.uk
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Grzegorz Dwornicki]

Ldapsearch -x '(memberuid=jsmith)'

This will not return user primary group.

Greg.

Send from htc desire z
08-08-2012 15:27, "Fosiul Alam"  napisał(a):
> Hi thanks
>
> Just  a quick qustion
> is there any ldapcommand which will give me a list of groups a user belong
> to ??
>
> Supppose I want to see all the groups list a user call jonh smith belong
> to ??
> thanks
>
> On Wed, Aug 8, 2012 at 2:05 PM, Michael R. Gettes 
> wrote:
> > to get a backup of just the data - the simplest thing to do is to use
> > db2ldif (documented well in the various versions).  you can use the GUI
>
> to
> > do an export which uses db2ldif under the covers.  db2ldif has various
> > capabilities to include and exclude portions of the tree.  ldif2db is to
> > import.  also well documented.  i do this all the time.  it's really
>
> easy.
> > /mrg
> >
> > On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
> >
> > You can run this in many ways for example:
> >
> > Ldapsearch -D "cn=Directory Manager" -W -b ou=Users,l=uk,dc=fosiul,dc=lan
> > Ldapsearch -D "cn=Directory Manager" -W -b
>
> ou=Groups,l=uk,dc=fosiul,dc=lan
> > This way you get 2 results in ldif format. But you can try something like
> > this:
> >
> > Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
> > '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
> >
> > I used "I" in ldapfilter because could not find pipe character on my
>
> phone
> > please use pipe character known from bash instead. Sorry for trouble.
> >
> > This command should give the same result as ones provided ealier, but in
>
> one
> > query. I am asking for all ldap content and filter it aginst persons,
> > posixgroups and users/groups containers.
> >
> > What i ment is you can do this task in many ways :)
> >
> > Greg.
> >
> > Send from z htc desire z
> >
> > 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> > > Hi thanks
> > >
> > > my ldap is like this
> > >
> > > l=uk,dc=fosiul,dc=lan
> > >
> > > then it has OU=Users
> > > OU=Grups
> > >
> > > what shall be the command  for bellow ?
> > > (Just run ldapseach as dirctory manger with criteria/filters/basedn you
> > > want. )
> > >
> > > On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki 
> > > wrote:
> > > > Yes i told you how in ealier mail.
> > > >
> > > > Just run ldapseach as dirctory manger with criteria/filters/basedn you
> > > > want.
> > > > Next pipe or copy results to file. Maybe use sed on the file to make
> > > > litle
> > > > changes of needed. Copy it to second server and use ldapadd on it.
> > > >
> > > > Greg.
> > > >
> > > > Send from z htc desire z
> > > >
> > > > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > > > Hi
> > > > > Is there any way to make ldif from production server
> > > > > then  run this on this test server??
> > > > >
> > > > > Fosiul
> > > > >
> > > > > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki <[e-mail]
> > > > > wrote:
> > > > > > Hi
> > > > > >
> > > > > > I'm not sure about your second server, does it need to have same
>
> base
> > > > > > tree.
> > > > > > I think yes it needs. Because admin console and shell 389 backup
> > > > > > tools
> > > > > > make
> > > > > > copy of database files not in ldif format. If your second server
>
> have
> > > > > > diferent tree you can use sed + ldapsearch to extract data.
> > > > > >
> > > > > > Consider also this: The best way to sync two or more ldap servers
>
> is
> > > > > > replication.
> > > > > >
> > > > > > Greg.
> > > > > >
> > > > > > wiadomosc wyslana z htc desire z
> > > > > >
> > > > > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > > >
> > > > > > > Hi
> > > > > > > I have a running Fedora 389 Server
> > > > > > >
> > > > > > > I want to create a test server but i want to have the same data
>
> from
> > > > > > > My production server
> > > > > > >
> > > > > > > So i am thinking
> > > > > > > if i take a backup of production server
> > > > > > >
> > > > > > > then create a a new 389 instances then restore from that backup in
> > > > > > > to
> > > > > > > new 389 instance
> > > > > > > will it work ??
> > > > > > >
> > > > > > > Thanks for your help.
> > > > > > >
> > > > > > > Fosiul
> > > > > > > --
> > > > > > > 389 users mailing list
> > > > > > > [e-mail]
> > > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > >
> > > > > > --
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > Regards
> > > > > Fosiul Alam
> > > > > 07877100621
> > > > > http://www.fosiul.co.uk
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > Regards
> > > Fosiul Alam
> > > 07877100621
> > > http://www.fosiul.co.uk
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> Regards
> Fosiul Alam
> 07877100621
> http://www.fosiul.co.uk
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Fosiul Alam]

Hi thanks
but thats not giving me result of all the groups this user belong to ??

will really appropriate your help.
Fosiul.

On Wed, Aug 8, 2012 at 2:36 PM, Grzegorz Dwornicki  wrote:
> Ldapsearch -x '(memberuid=jsmith)'
>
> This will not return user primary group.
>
> Greg.
>
> Send from htc desire z
>
> 08-08-2012 15:27, "Fosiul Alam"  napisał(a):
> > Hi thanks
> >
> > Just  a quick qustion
> > is there any ldapcommand which will give me a list of groups a user belong
> > to ??
> >
> > Supppose I want to see all the groups list a user call jonh smith belong
> > to ??
> > thanks
> >
> > On Wed, Aug 8, 2012 at 2:05 PM, Michael R. Gettes 
> > wrote:
> > > to get a backup of just the data - the simplest thing to do is to use
> > > db2ldif (documented well in the various versions).  you can use the GUI
> > > to
> > > do an export which uses db2ldif under the covers.  db2ldif has various
> > > capabilities to include and exclude portions of the tree.  ldif2db is to
> > > import.  also well documented.  i do this all the time.  it's really
> > > easy.
> > >
> > > /mrg
> > >
> > > On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
> > >
> > > You can run this in many ways for example:
> > >
> > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > ou=Users,l=uk,dc=fosiul,dc=lan
> > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > ou=Groups,l=uk,dc=fosiul,dc=lan
> > >
> > > This way you get 2 results in ldif format. But you can try something
> > > like
> > > this:
> > >
> > > Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
> > > '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
> > >
> > > I used "I" in ldapfilter because could not find pipe character on my
> > > phone
> > > please use pipe character known from bash instead. Sorry for trouble.
> > >
> > > This command should give the same result as ones provided ealier, but in
> > > one
> > > query. I am asking for all ldap content and filter it aginst persons,
> > > posixgroups and users/groups containers.
> > >
> > > What i ment is you can do this task in many ways :)
> > >
> > > Greg.
> > >
> > > Send from z htc desire z
> > >
> > > 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> > > > Hi thanks
> > > >
> > > > my ldap is like this
> > > >
> > > > l=uk,dc=fosiul,dc=lan
> > > >
> > > > then it has OU=Users
> > > > OU=Grups
> > > >
> > > > what shall be the command  for bellow ?
> > > > (Just run ldapseach as dirctory manger with criteria/filters/basedn you
> > > > want. )
> > > >
> > > > On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki 
> > > > wrote:
> > > > > Yes i told you how in ealier mail.
> > > > >
> > > > > Just run ldapseach as dirctory manger with criteria/filters/basedn
> > > > > you
> > > > > want.
> > > > > Next pipe or copy results to file. Maybe use sed on the file to make
> > > > > litle
> > > > > changes of needed. Copy it to second server and use ldapadd on it.
> > > > >
> > > > > Greg.
> > > > >
> > > > > Send from z htc desire z
> > > > >
> > > > > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > > > > Hi
> > > > > > Is there any way to make ldif from production server
> > > > > > then  run this on this test server??
> > > > > >
> > > > > > Fosiul
> > > > > >
> > > > > > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki
> > > > > >
> > > > > > wrote:
> > > > > > > Hi
> > > > > > >
> > > > > > > I'm not sure about your second server, does it need to have same
> > > > > > > base
> > > > > > > tree.
> > > > > > > I think yes it needs. Because admin console and shell 389 backup
> > > > > > > tools
> > > > > > > make
> > > > > > > copy of database files not in ldif format. If your second server
> > > > > > > have
> > > > > > > diferent tree you can use sed + ldapsearch to extract data.
> > > > > > >
> > > > > > > Consider also this: The best way to sync two or more ldap servers
> > > > > > > is
> > > > > > > replication.
> > > > > > >
> > > > > > > Greg.
> > > > > > >
> > > > > > > wiadomosc wyslana z htc desire z
> > > > > > >
> > > > > > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > > >>
> > > > > > >> Hi
> > > > > > >> I have a running Fedora 389 Server
> > > > > > >>
> > > > > > >> I want to create a test server but i want to have the same data
> > > > > > >> from
> > > > > > >> My production server
> > > > > > >>
> > > > > > >> So i am thinking
> > > > > > >> if i take a backup of production server
> > > > > > >>
> > > > > > >> then create a a new 389 instances then restore from that backup
> > > > > > >> in
> > > > > > >> to
> > > > > > >> new 389 instance
> > > > > > >> will it work ??
> > > > > > >>
> > > > > > >> Thanks for your help.
> > > > > > >>
> > > > > > >> Fosiul
> > > > > > >> --
> > > > > > >> 389 users mailing list
> > > > > > >> [e-mail]
> > > > > > >> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > 389 users mailing list
> > > > > > > [e-mail]
> > > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > >
> > > > > > --
> > > > > > Regards
> > > > > > Fosiul Alam
> > > > > > 07877100621
> > > > > > http://www.fosiul.co.uk
> > > > > > --
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > Regards
> > > > Fosiul Alam
> > > > 07877100621
> > > > http://www.fosiul.co.uk
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > Regards
> > Fosiul Alam
> > 07877100621
> > http://www.fosiul.co.uk
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Grzegorz Dwornicki]

Hi

I had to be sure soo i looked in other your topic. You are using
uniquemember attibute? Try this:

Ldapsearch -x '(uniquemember=jsmith)'

Greg.

Send from htc desire z
08-08-2012 16:23, "Fosiul Alam"  napisał(a):
> Hi thanks
> but thats not giving me result of all the groups this user belong to ??
>
> will really appropriate your help.
> Fosiul.
>
> On Wed, Aug 8, 2012 at 2:36 PM, Grzegorz Dwornicki 
> wrote:
> > Ldapsearch -x '(memberuid=jsmith)'
> >
> > This will not return user primary group.
> >
> > Greg.
> >
> > Send from htc desire z
> >
> > 08-08-2012 15:27, "Fosiul Alam"  napisał(a):
> > > Hi thanks
> > >
> > > Just  a quick qustion
> > > is there any ldapcommand which will give me a list of groups a user
>
> belong
> > > to ??
> > >
> > > Supppose I want to see all the groups list a user call jonh smith belong
> > > to ??
> > > thanks
> > >
> > > On Wed, Aug 8, 2012 at 2:05 PM, Michael R. Gettes 
> > > wrote:
> > > > to get a backup of just the data - the simplest thing to do is to use
> > > > db2ldif (documented well in the various versions).  you can use the
>
> GUI
> > > > to
> > > > do an export which uses db2ldif under the covers.  db2ldif has various
> > > > capabilities to include and exclude portions of the tree.  ldif2db is
>
> to
> > > > import.  also well documented.  i do this all the time.  it's really
> > > > easy.
> > > >
> > > > /mrg
> > > >
> > > > On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
> > > >
> > > > You can run this in many ways for example:
> > > >
> > > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > > ou=Users,l=uk,dc=fosiul,dc=lan
> > > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > > ou=Groups,l=uk,dc=fosiul,dc=lan
> > > >
> > > > This way you get 2 results in ldif format. But you can try something
> > > > like
> > > > this:
> > > >
> > > > Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
> > > > '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
> > > >
> > > > I used "I" in ldapfilter because could not find pipe character on my
> > > > phone
> > > > please use pipe character known from bash instead. Sorry for trouble.
> > > >
> > > > This command should give the same result as ones provided ealier, but
>
> in
> > > > one
> > > > query. I am asking for all ldap content and filter it aginst persons,
> > > > posixgroups and users/groups containers.
> > > >
> > > > What i ment is you can do this task in many ways :)
> > > >
> > > > Greg.
> > > >
> > > > Send from z htc desire z
> > > >
> > > > 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> > > > > Hi thanks
> > > > >
> > > > > my ldap is like this
> > > > >
> > > > > l=uk,dc=fosiul,dc=lan
> > > > >
> > > > > then it has OU=Users
> > > > > OU=Grups
> > > > >
> > > > > what shall be the command  for bellow ?
> > > > > (Just run ldapseach as dirctory manger with criteria/filters/basedn
>
> you
> > > > > want. )
> > > > >
> > > > > On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki <[e-mail]
> > > > > wrote:
> > > > > > Yes i told you how in ealier mail.
> > > > > >
> > > > > > Just run ldapseach as dirctory manger with criteria/filters/basedn
> > > > > > you
> > > > > > want.
> > > > > > Next pipe or copy results to file. Maybe use sed on the file to
>
> make
> > > > > > litle
> > > > > > changes of needed. Copy it to second server and use ldapadd on it.
> > > > > >
> > > > > > Greg.
> > > > > >
> > > > > > Send from z htc desire z
> > > > > >
> > > > > > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > > > >
> > > > > > > Hi
> > > > > > > Is there any way to make ldif from production server
> > > > > > > then  run this on this test server??
> > > > > > >
> > > > > > > Fosiul
> > > > > > >
> > > > > > > On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki
> > > > > > > 
> > > > > > > wrote:
> > > > > > > > Hi
> > > > > > > >
> > > > > > > > I'm not sure about your second server, does it need to have same
> > > > > > > > base
> > > > > > > > tree.
> > > > > > > > I think yes it needs. Because admin console and shell 389 backup
> > > > > > > > tools
> > > > > > > > make
> > > > > > > > copy of database files not in ldif format. If your second server
> > > > > > > > have
> > > > > > > > diferent tree you can use sed + ldapsearch to extract data.
> > > > > > > >
> > > > > > > > Consider also this: The best way to sync two or more ldap
>
> servers
> > > > > > > > is
> > > > > > > > replication.
> > > > > > > >
> > > > > > > > Greg.
> > > > > > > >
> > > > > > > > wiadomosc wyslana z htc desire z
> > > > > > > >
> > > > > > > > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > > > >>
> > > > > > > >> Hi
> > > > > > > >> I have a running Fedora 389 Server
> > > > > > > >>
> > > > > > > >> I want to create a test server but i want to have the same data
> > > > > > > >> from
> > > > > > > >> My production server
> > > > > > > >>
> > > > > > > >> So i am thinking
> > > > > > > >> if i take a backup of production server
> > > > > > > >>
> > > > > > > >> then create a a new 389 instances then restore from that backup
> > > > > > > >> in
> > > > > > > >> to
> > > > > > > >> new 389 instance
> > > > > > > >> will it work ??
> > > > > > > >>
> > > > > > > >> Thanks for your help.
> > > > > > > >>
> > > > > > > >> Fosiul
> > > > > > > >> --
> > > > > > > >> 389 users mailing list
> > > > > > > >> [e-mail]
> > > > > > > >> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > > >
> > > > > > > >
> > > > > > > > --
> > > > > > > > 389 users mailing list
> > > > > > > > [e-mail]
> > > > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > Regards
> > > > > > > Fosiul Alam
> > > > > > > 07877100621
> > > > > > > http://www.fosiul.co.uk
> > > > > > > --
> > > > > > > 389 users mailing list
> > > > > > > [e-mail]
> > > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > >
> > > > > > --
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > Regards
> > > > > Fosiul Alam
> > > > > 07877100621
> > > > > http://www.fosiul.co.uk
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > Regards
> > > Fosiul Alam
> > > 07877100621
> > > http://www.fosiul.co.uk
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> Regards
> Fosiul Alam
> 07877100621
> http://www.fosiul.co.uk
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Fosiul Alam]

Hi
Sorry

but

ldapsearch -xZZ '(uniquemember=falam)'

it does not return anything

On Wed, Aug 8, 2012 at 4:07 PM, Grzegorz Dwornicki  wrote:
> Hi
>
> I had to be sure soo i looked in other your topic. You are using
> uniquemember attibute? Try this:
>
> Ldapsearch -x '(uniquemember=jsmith)'
>
> Greg.
>
> Send from htc desire z
>
> 08-08-2012 16:23, "Fosiul Alam"  napisał(a):
> > Hi thanks
> > but thats not giving me result of all the groups this user belong to ??
> >
> > will really appropriate your help.
> > Fosiul.
> >
> > On Wed, Aug 8, 2012 at 2:36 PM, Grzegorz Dwornicki 
> > wrote:
> > > Ldapsearch -x '(memberuid=jsmith)'
> > >
> > > This will not return user primary group.
> > >
> > > Greg.
> > >
> > > Send from htc desire z
> > >
> > > 08-08-2012 15:27, "Fosiul Alam"  napisał(a):
> > > > Hi thanks
> > > >
> > > > Just  a quick qustion
> > > > is there any ldapcommand which will give me a list of groups a user
> > > > belong
> > > > to ??
> > > >
> > > > Supppose I want to see all the groups list a user call jonh smith
> > > > belong
> > > > to ??
> > > > thanks
> > > >
> > > > On Wed, Aug 8, 2012 at 2:05 PM, Michael R. Gettes 
> > > > wrote:
> > > > > to get a backup of just the data - the simplest thing to do is to use
> > > > > db2ldif (documented well in the various versions).  you can use the
> > > > > GUI
> > > > > to
> > > > > do an export which uses db2ldif under the covers.  db2ldif has
> > > > > various
> > > > > capabilities to include and exclude portions of the tree.  ldif2db is
> > > > > to
> > > > > import.  also well documented.  i do this all the time.  it's really
> > > > > easy.
> > > > >
> > > > > /mrg
> > > > >
> > > > > On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
> > > > >
> > > > > You can run this in many ways for example:
> > > > >
> > > > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > > > ou=Users,l=uk,dc=fosiul,dc=lan
> > > > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > > > ou=Groups,l=uk,dc=fosiul,dc=lan
> > > > >
> > > > > This way you get 2 results in ldif format. But you can try something
> > > > > like
> > > > > this:
> > > > >
> > > > > Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
> > > > >
> > > > > '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
> > > > >
> > > > > I used "I" in ldapfilter because could not find pipe character on my
> > > > > phone
> > > > > please use pipe character known from bash instead. Sorry for trouble.
> > > > >
> > > > > This command should give the same result as ones provided ealier, but
> > > > > in
> > > > > one
> > > > > query. I am asking for all ldap content and filter it aginst persons,
> > > > > posixgroups and users/groups containers.
> > > > >
> > > > > What i ment is you can do this task in many ways :)
> > > > >
> > > > > Greg.
> > > > >
> > > > > Send from z htc desire z
> > > > >
> > > > > 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> > > > > > Hi thanks
> > > > > >
> > > > > > my ldap is like this
> > > > > >
> > > > > > l=uk,dc=fosiul,dc=lan
> > > > > >
> > > > > > then it has OU=Users
> > > > > > OU=Grups
> > > > > >
> > > > > > what shall be the command  for bellow ?
> > > > > > (Just run ldapseach as dirctory manger with criteria/filters/basedn
> > > > > > you
> > > > > > want. )
> > > > > >
> > > > > > On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki
> > > > > >
> > > > > > wrote:
> > > > > > > Yes i told you how in ealier mail.
> > > > > > >
> > > > > > > Just run ldapseach as dirctory manger with criteria/filters/basedn
> > > > > > > you
> > > > > > > want.
> > > > > > > Next pipe or copy results to file. Maybe use sed on the file to
> > > > > > > make
> > > > > > > litle
> > > > > > > changes of needed. Copy it to second server and use ldapadd on it.
> > > > > > >
> > > > > > > Greg.
> > > > > > >
> > > > > > > Send from z htc desire z
> > > > > > >
> > > > > > > 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > > > > >
> > > > > > >> Hi
> > > > > > >> Is there any way to make ldif from production server
> > > > > > >> then  run this on this test server??
> > > > > > >>
> > > > > > >> Fosiul
> > > > > > >>
> > > > > > >> On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki
> > > > > > >> 
> > > > > > >> wrote:
> > > > > > >> > Hi
> > > > > > >> >
> > > > > > >> > I'm not sure about your second server, does it need to have
> > > > > > >> > same
> > > > > > >> > base
> > > > > > >> > tree.
> > > > > > >> > I think yes it needs. Because admin console and shell 389
> > > > > > >> > backup
> > > > > > >> > tools
> > > > > > >> > make
> > > > > > >> > copy of database files not in ldif format. If your second
> > > > > > >> > server
> > > > > > >> > have
> > > > > > >> > diferent tree you can use sed + ldapsearch to extract data.
> > > > > > >> >
> > > > > > >> > Consider also this: The best way to sync two or more ldap
> > > > > > >> > servers
> > > > > > >> > is
> > > > > > >> > replication.
> > > > > > >> >
> > > > > > >> > Greg.
> > > > > > >> >
> > > > > > >> > wiadomosc wyslana z htc desire z
> > > > > > >> >
> > > > > > >> > 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > > >> >>
> > > > > > >> >> Hi
> > > > > > >> >> I have a running Fedora 389 Server
> > > > > > >> >>
> > > > > > >> >> I want to create a test server but i want to have the same
> > > > > > >> >> data
> > > > > > >> >> from
> > > > > > >> >> My production server
> > > > > > >> >>
> > > > > > >> >> So i am thinking
> > > > > > >> >> if i take a backup of production server
> > > > > > >> >>
> > > > > > >> >> then create a a new 389 instances then restore from that
> > > > > > >> >> backup
> > > > > > >> >> in
> > > > > > >> >> to
> > > > > > >> >> new 389 instance
> > > > > > >> >> will it work ??
> > > > > > >> >>
> > > > > > >> >> Thanks for your help.
> > > > > > >> >>
> > > > > > >> >> Fosiul
> > > > > > >> >> --
> > > > > > >> >> 389 users mailing list
> > > > > > >> >> [e-mail]
> > > > > > >> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >> >
> > > > > > >> >
> > > > > > >> > --
> > > > > > >> > 389 users mailing list
> > > > > > >> > [e-mail]
> > > > > > >> > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >>
> > > > > > >>
> > > > > > >>
> > > > > > >> --
> > > > > > >> Regards
> > > > > > >> Fosiul Alam
> > > > > > >> 07877100621
> > > > > > >> http://www.fosiul.co.uk
> > > > > > >> --
> > > > > > >> 389 users mailing list
> > > > > > >> [e-mail]
> > > > > > >> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > 389 users mailing list
> > > > > > > [e-mail]
> > > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > >
> > > > > > --
> > > > > > Regards
> > > > > > Fosiul Alam
> > > > > > 07877100621
> > > > > > http://www.fosiul.co.uk
> > > > > > --
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > Regards
> > > > Fosiul Alam
> > > > 07877100621
> > > > http://www.fosiul.co.uk
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > Regards
> > Fosiul Alam
> > 07877100621
> > http://www.fosiul.co.uk
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Rich Megginson]

On 08/08/2012 09:16 AM, Fosiul Alam wrote:
> Hi
> Sorry
>
> but
>
> ldapsearch -xZZ '(uniquemember=falam)'
>
> it does not return anything

uniquemember is a DN, so try
(uniquemember=uid=falam,ou=people,dc=example,dc=com)
> On Wed, Aug 8, 2012 at 4:07 PM, Grzegorz Dwornicki  wrote:
> > Hi
> >
> > I had to be sure soo i looked in other your topic. You are using
> > uniquemember attibute? Try this:
> >
> > Ldapsearch -x '(uniquemember=jsmith)'
> >
> > Greg.
> >
> > Send from htc desire z
> >
> > 08-08-2012 16:23, "Fosiul Alam"  napisał(a):
> > > Hi thanks
> > > but thats not giving me result of all the groups this user belong to ??
> > >
> > > will really appropriate your help.
> > > Fosiul.
> > >
> > > On Wed, Aug 8, 2012 at 2:36 PM, Grzegorz Dwornicki
> > > wrote:
> > > > Ldapsearch -x '(memberuid=jsmith)'
> > > >
> > > > This will not return user primary group.
> > > >
> > > > Greg.
> > > >
> > > > Send from htc desire z
> > > >
> > > > 08-08-2012 15:27, "Fosiul Alam"  napisał(a):
> > > > > Hi thanks
> > > > >
> > > > > Just  a quick qustion
> > > > > is there any ldapcommand which will give me a list of groups a user
> > > > > belong
> > > > > to ??
> > > > >
> > > > > Supppose I want to see all the groups list a user call jonh smith
> > > > > belong
> > > > > to ??
> > > > > thanks
> > > > >
> > > > > On Wed, Aug 8, 2012 at 2:05 PM, Michael R. Gettes
> > > > > wrote:
> > > > > > to get a backup of just the data - the simplest thing to do is to use
> > > > > > db2ldif (documented well in the various versions).  you can use the
> > > > > > GUI
> > > > > > to
> > > > > > do an export which uses db2ldif under the covers.  db2ldif has
> > > > > > various
> > > > > > capabilities to include and exclude portions of the tree.  ldif2db is
> > > > > > to
> > > > > > import.  also well documented.  i do this all the time.  it's really
> > > > > > easy.
> > > > > >
> > > > > > /mrg
> > > > > >
> > > > > > On Aug 8, 2012, at 9:01, Grzegorz Dwornicki wrote:
> > > > > >
> > > > > > You can run this in many ways for example:
> > > > > >
> > > > > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > > > > ou=Users,l=uk,dc=fosiul,dc=lan
> > > > > > Ldapsearch -D "cn=Directory Manager" -W -b
> > > > > > ou=Groups,l=uk,dc=fosiul,dc=lan
> > > > > >
> > > > > > This way you get 2 results in ldif format. But you can try something
> > > > > > like
> > > > > > this:
> > > > > >
> > > > > > Ldapsearch -D "cn=Directory Manager" -W -b l=uk,dc=fosiul,dc=lan
> > > > > >
> > > > > > '(I(objectclass=person)(ou=Groups)(ou=Users)(objectclass=posixgroup))'
> > > > > >
> > > > > > I used "I" in ldapfilter because could not find pipe character on my
> > > > > > phone
> > > > > > please use pipe character known from bash instead. Sorry for trouble.
> > > > > >
> > > > > > This command should give the same result as ones provided ealier, but
> > > > > > in
> > > > > > one
> > > > > > query. I am asking for all ldap content and filter it aginst persons,
> > > > > > posixgroups and users/groups containers.
> > > > > >
> > > > > > What i ment is you can do this task in many ways :)
> > > > > >
> > > > > > Greg.
> > > > > >
> > > > > > Send from z htc desire z
> > > > > >
> > > > > > 08-08-2012 14:35, "Fosiul Alam"  napisał(a):
> > > > > > > Hi thanks
> > > > > > >
> > > > > > > my ldap is like this
> > > > > > >
> > > > > > > l=uk,dc=fosiul,dc=lan
> > > > > > >
> > > > > > > then it has OU=Users
> > > > > > > OU=Grups
> > > > > > >
> > > > > > > what shall be the command  for bellow ?
> > > > > > > (Just run ldapseach as dirctory manger with criteria/filters/basedn
> > > > > > > you
> > > > > > > want. )
> > > > > > >
> > > > > > > On Wed, Aug 8, 2012 at 1:33 PM, Grzegorz Dwornicki
> > > > > > > 
> > > > > > > wrote:
> > > > > > >> Yes i told you how in ealier mail.
> > > > > > >>
> > > > > > >> Just run ldapseach as dirctory manger with criteria/filters/basedn
> > > > > > >> you
> > > > > > >> want.
> > > > > > >> Next pipe or copy results to file. Maybe use sed on the file to
> > > > > > >> make
> > > > > > >> litle
> > > > > > >> changes of needed. Copy it to second server and use ldapadd on it.
> > > > > > >>
> > > > > > >> Greg.
> > > > > > >>
> > > > > > >> Send from z htc desire z
> > > > > > >>
> > > > > > >> 08-08-2012 14:25, "Fosiul Alam"  napisał(a):
> > > > > > >>
> > > > > > >>> Hi
> > > > > > >>> Is there any way to make ldif from production server
> > > > > > >>> then  run this on this test server??
> > > > > > >>>
> > > > > > >>> Fosiul
> > > > > > >>>
> > > > > > >>> On Wed, Aug 8, 2012 at 1:03 PM, Grzegorz Dwornicki
> > > > > > >>> 
> > > > > > >>> wrote:
> > > > > > >>>> Hi
> > > > > > >>>>
> > > > > > >>>> I'm not sure about your second server, does it need to have
> > > > > > >>>> same
> > > > > > >>>> base
> > > > > > >>>> tree.
> > > > > > >>>> I think yes it needs. Because admin console and shell 389
> > > > > > >>>> backup
> > > > > > >>>> tools
> > > > > > >>>> make
> > > > > > >>>> copy of database files not in ldif format. If your second
> > > > > > >>>> server
> > > > > > >>>> have
> > > > > > >>>> diferent tree you can use sed + ldapsearch to extract data.
> > > > > > >>>>
> > > > > > >>>> Consider also this: The best way to sync two or more ldap
> > > > > > >>>> servers
> > > > > > >>>> is
> > > > > > >>>> replication.
> > > > > > >>>>
> > > > > > >>>> Greg.
> > > > > > >>>>
> > > > > > >>>> wiadomosc wyslana z htc desire z
> > > > > > >>>>
> > > > > > >>>> 08-08-2012 13:41, "Fosiul Alam"  napisał(a):
> > > > > > >>>>> Hi
> > > > > > >>>>> I have a running Fedora 389 Server
> > > > > > >>>>>
> > > > > > >>>>> I want to create a test server but i want to have the same
> > > > > > >>>>> data
> > > > > > >>>>> from
> > > > > > >>>>> My production server
> > > > > > >>>>>
> > > > > > >>>>> So i am thinking
> > > > > > >>>>> if i take a backup of production server
> > > > > > >>>>>
> > > > > > >>>>> then create a a new 389 instances then restore from that
> > > > > > >>>>> backup
> > > > > > >>>>> in
> > > > > > >>>>> to
> > > > > > >>>>> new 389 instance
> > > > > > >>>>> will it work ??
> > > > > > >>>>>
> > > > > > >>>>> Thanks for your help.
> > > > > > >>>>>
> > > > > > >>>>> Fosiul
> > > > > > >>>>> --
> > > > > > >>>>> 389 users mailing list
> > > > > > >>>>> [e-mail]
> > > > > > >>>>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >>>>
> > > > > > >>>> --
> > > > > > >>>> 389 users mailing list
> > > > > > >>>> [e-mail]
> > > > > > >>>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >>>
> > > > > > >>>
> > > > > > >>> --
> > > > > > >>> Regards
> > > > > > >>> Fosiul Alam
> > > > > > >>> 07877100621
> > > > > > >>> http://www.fosiul.co.uk
> > > > > > >>> --
> > > > > > >>> 389 users mailing list
> > > > > > >>> [e-mail]
> > > > > > >>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >>
> > > > > > >> --
> > > > > > >> 389 users mailing list
> > > > > > >> [e-mail]
> > > > > > >> https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > Regards
> > > > > > > Fosiul Alam
> > > > > > > 07877100621
> > > > > > > http://www.fosiul.co.uk
> > > > > > > --
> > > > > > > 389 users mailing list
> > > > > > > [e-mail]
> > > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > >
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > > >
> > > > > > --
> > > > > > 389 users mailing list
> > > > > > [e-mail]
> > > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > > >
> > > > > --
> > > > > Regards
> > > > > Fosiul Alam
> > > > > 07877100621
> > > > > http://www.fosiul.co.uk
> > > > > --
> > > > > 389 users mailing list
> > > > > [e-mail]
> > > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > > >
> > > > --
> > > > 389 users mailing list
> > > > [e-mail]
> > > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> > >
> > > --
> > > Regards
> > > Fosiul Alam
> > > 07877100621
> > > http://www.fosiul.co.uk
> > > --
> > > 389 users mailing list
> > > [e-mail]
> > > https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users